-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2026 21:10:06 +0100 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: arm64 Version: 2.41-12+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1125678 1125748 1126266 Changes: glibc (2.41-12+deb13u2) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a null pointer dereference in macros in multithreaded programs with multiple libc.so. - Fix _r_debug handling when interposed by the main executable, restoring compatibility with Dyninst. - Fix a null pointer dereference in symbol lookup when the symbol version hash value is zero. - Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor. - Preserve vector registers in the i386 TLS slow path. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on amd64. - Fix NSS group merge not reacting to ERANGE during merge. - Detect Intel Nova and Wildcat processors and use the same ifunc selection as for Intel Panther Lake. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix incorrect return values and improve special case handling in arm64 SVE pow/powf and tanpi/tanpif implementations. - Optimise SVE scalar callbacks on arm64. - Correct SME handling on arm64 by disabling ZA state in setjmp and sigsetjmp, clearing ZA state in clone/clone3. - Fix conform tests on arm64 when the toolchain does not default to -mbranch-protection=standard. - Fix performance instability in AdvSIMD tan and sinh function on arm64 - Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el, they got previously disabled 2.41-8 due to a security issue. - Fix POWER optimized rawmemchr function on ppc64el. - Validate pread size and offset for overflow when reading ELF headers in the sprof utility. - Minor fixes to testsuite support code. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Switch currency symbol for the bg_BG locale to euro. * Revert addition of symbol versions used as ABI flags, as the dpkg-shlibdeps version in trixie is not able to handle them (see #1122107): - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff Checksums-Sha1: d886f59df9dbaaf055a39bbb3bfd68226e58065a 12770 glibc_2.41-12+deb13u2_arm64-buildd.buildinfo 0c34cef4376b9acce1dffd05a936560c8014c2c2 2193788 libc-bin-dbgsym_2.41-12+deb13u2_arm64.deb 8f348097ea679c60ce0aea3d871c9f59dd117086 551708 libc-bin_2.41-12+deb13u2_arm64.deb 792309772bd1141819ad748ce1308603e51b3b07 32360 libc-dev-bin-dbgsym_2.41-12+deb13u2_arm64.deb e69cdd22ffc8dfe8cbb04c885a1acd26e811710d 58592 libc-dev-bin_2.41-12+deb13u2_arm64.deb e38d06d288dd22f5dcf61f9bbebb75d4473e8980 48428 libc-devtools-dbgsym_2.41-12+deb13u2_arm64.deb e01b98b549697d9b4520c2530b7871733efba299 67644 libc-devtools_2.41-12+deb13u2_arm64.deb 7d6369811ffd2b31233ff03328cdd1fade307c4b 6679924 libc6-dbg_2.41-12+deb13u2_arm64.deb 827068c6a5bc18ab69a6ca45bdf8f7e2881fe5b1 14036 libc6-dev-dbgsym_2.41-12+deb13u2_arm64.deb 1af88f6f71c28913c0d9e2baf13d71f81088ff87 1624164 libc6-dev_2.41-12+deb13u2_arm64.deb aa9cdf657f4264bd31402138829b807cc6bb1440 1042988 libc6-udeb_2.41-12+deb13u2_arm64.udeb a202a91606847dfee5eddd09b834d36ae59893b2 2483700 libc6_2.41-12+deb13u2_arm64.deb 4923519d38d9d34d441c2e0a508429c5a6c26b69 11079300 locales-all_2.41-12+deb13u2_arm64.deb 29bc6958cbd1c2f33ffc95301636c5ea646c5926 219708 nscd-dbgsym_2.41-12+deb13u2_arm64.deb 11832fd4b3064d938937c5d720ce47a470a6eef5 101084 nscd_2.41-12+deb13u2_arm64.deb Checksums-Sha256: 30a3ddf3169b833ec2e44a4aa2e7e64753febacdbe10648aa7c2de4fd3bc911b 12770 glibc_2.41-12+deb13u2_arm64-buildd.buildinfo fea85ae82d66965a1f87be7f557450eabef6791ddc29a8817f8c9e15af4aa896 2193788 libc-bin-dbgsym_2.41-12+deb13u2_arm64.deb c533ba20b97e8cec1ad816936043e7c2cfa24e724e13e99eaa66cad74fbff0c8 551708 libc-bin_2.41-12+deb13u2_arm64.deb 804a89495ba1d4c8a78dcac104aa93f714c83eaa51bb6ed012f8409e29002f00 32360 libc-dev-bin-dbgsym_2.41-12+deb13u2_arm64.deb 32d2386c5812661eb3b9d2f388d46790cd76cfc331ec37cdec3af3a4dab1b606 58592 libc-dev-bin_2.41-12+deb13u2_arm64.deb 888230b866a3eb0c11edb95d1b0f853b689c9f48cf5e9eb1fd97fdd4a717d261 48428 libc-devtools-dbgsym_2.41-12+deb13u2_arm64.deb c2e30d9b89b25c5b1e974a2df3f61c2bc31eab34718e1909a99d740de9965f65 67644 libc-devtools_2.41-12+deb13u2_arm64.deb 10c1c77f05de68e1fbc900b1c50bb309c3d6e9f7030e37d11f7bffcc313d61dc 6679924 libc6-dbg_2.41-12+deb13u2_arm64.deb e1fb9fabfd425e1b058b3d244bbc5b914e50025793611cb12943aa7488955c48 14036 libc6-dev-dbgsym_2.41-12+deb13u2_arm64.deb 754680a28d06b040a47aa39c6b8153f51683bafa5b7a57e4ef0a4a6e21cf8820 1624164 libc6-dev_2.41-12+deb13u2_arm64.deb 2cf82e627f8c4a9bcecb49abb13f301400e39ea77cf47ad5e7ec025265d52640 1042988 libc6-udeb_2.41-12+deb13u2_arm64.udeb f4679f22ee71be9f79bb36c62bb0b6fed97c19f245d2afaf8a9c1d000a1d312a 2483700 libc6_2.41-12+deb13u2_arm64.deb 8d5491063e07f0a7326fb64aece69dded9a8affdfcf6ca1fd9bc453009936663 11079300 locales-all_2.41-12+deb13u2_arm64.deb a5db3917e16cdeda1af6d347d7c3f6a8f5fd9874f23e2e5e2fb3a389d3537018 219708 nscd-dbgsym_2.41-12+deb13u2_arm64.deb 794838dc9dac638fd604906e85e8e3a3693b81c0b8836dcf249bd8feaa384f98 101084 nscd_2.41-12+deb13u2_arm64.deb Files: ca3bf1ca62054c3d4e5a6c941c080845 12770 libs required glibc_2.41-12+deb13u2_arm64-buildd.buildinfo e4e95c99b6c345604b4431517b62b070 2193788 debug optional libc-bin-dbgsym_2.41-12+deb13u2_arm64.deb ed0343278c4842a69fcba17257f4d395 551708 libs required libc-bin_2.41-12+deb13u2_arm64.deb eb2d7992105f9d4e2ad8915f62c8a79b 32360 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u2_arm64.deb ba0321ed4cb4144713d1d2663ae94a8c 58592 libdevel optional libc-dev-bin_2.41-12+deb13u2_arm64.deb 378cee1e8abe1a5def4e6425c3a83e5e 48428 debug optional libc-devtools-dbgsym_2.41-12+deb13u2_arm64.deb 4918707edf09aa2dd69d9e333b46f2d4 67644 devel optional libc-devtools_2.41-12+deb13u2_arm64.deb c86317daa899a9bd912490724bd0db4c 6679924 debug optional libc6-dbg_2.41-12+deb13u2_arm64.deb 5d7e2c57a234d9b88e8ce274dac1d306 14036 debug optional libc6-dev-dbgsym_2.41-12+deb13u2_arm64.deb 36469949640f49e5b5ecf8d671723bdd 1624164 libdevel optional libc6-dev_2.41-12+deb13u2_arm64.deb 74c84e1c82dcf16da36bcae48774b193 1042988 debian-installer optional libc6-udeb_2.41-12+deb13u2_arm64.udeb 627f2aeebe305b8a1cf10fa607d03252 2483700 libs optional libc6_2.41-12+deb13u2_arm64.deb a7a498c2f7abe6adecdca4a43bc598ec 11079300 localization optional locales-all_2.41-12+deb13u2_arm64.deb c8ffba018c6d2a069154d4318ac38d6f 219708 debug optional nscd-dbgsym_2.41-12+deb13u2_arm64.deb 4df8622271f345939c6a2896b7a21690 101084 admin optional nscd_2.41-12+deb13u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmmmi18ACgkQCr/D/stJ kDwSpA//VUoX9HgPA5YUkbqOctUFGI/5Lfnv8Jeei79/A6g9mf04HxXTTfAUF4CB Uh7spWekK/WnxE6C86381cJyQm4QRiT/B14XtthXh4oTdUyfcMpaciAoRmlZNLbk 9DvzoJnihPZskYVokggK4GK4BJnrBY3CmoARN8jGknUzNteSyRiUNQPntOKl8oBD ybD+OqZJrfbXmJgIz2std+821anrfPr/3dZeI5BaIiV4ZeT5xca1VpkralyKJDtG w5ZY4rJiPQ1Gc0KO6NXbGreY83EzxXu7I5qYJ/iQw5Pwy8zllUX212DYm+kRWRVU J3jU1NCEOy7Tr3Z6pglOwF+EfxC8Mdb0RESH/qJLD7NvQXSM9hQetSdZyYYSHLpM mNmmtUv/qtz22aWzSwZRRMrXj72DqN2VPsPtmaWVi67G8EJWw8a3OTrM6yOICfx3 24chWwdiul/b4zxmBC74zsh4npVJL+Gp6RKOLKjwesjIZzUsIODYgvEKlkjBG3nW syPWW6H30UYmasLGUq1pQFhsMx+P8Hfa1fB4Q8oMj4XNbbRgYcrwEH1bN1IICoYN K7EO9TR45I8ZwVYAEQldhOUG0GcAvlDmd7VsRCpIJhWNB8pPKOag5UpPengQJxU6 hasATlMJUo11QnVr/9We80XGar8weCxxCyacW/xLDZ6/ZOXZd0M= =/vDj -----END PGP SIGNATURE-----